diff options
Diffstat (limited to 'drivers/isdn/pcbit')
-rw-r--r-- | drivers/isdn/pcbit/drv.c | 10 |
1 files changed, 3 insertions, 7 deletions
diff --git a/drivers/isdn/pcbit/drv.c b/drivers/isdn/pcbit/drv.c index 123c1d6c43b4..1507d2e83fbb 100644 --- a/drivers/isdn/pcbit/drv.c +++ b/drivers/isdn/pcbit/drv.c | |||
@@ -411,14 +411,10 @@ static int pcbit_writecmd(const u_char __user *buf, int len, int driver, int cha | |||
411 | return -EINVAL; | 411 | return -EINVAL; |
412 | } | 412 | } |
413 | 413 | ||
414 | cbuf = kmalloc(len, GFP_KERNEL); | 414 | cbuf = memdup_user(buf, len); |
415 | if (!cbuf) | 415 | if (IS_ERR(cbuf)) |
416 | return -ENOMEM; | 416 | return PTR_ERR(cbuf); |
417 | 417 | ||
418 | if (copy_from_user(cbuf, buf, len)) { | ||
419 | kfree(cbuf); | ||
420 | return -EFAULT; | ||
421 | } | ||
422 | memcpy_toio(dev->sh_mem, cbuf, len); | 418 | memcpy_toio(dev->sh_mem, cbuf, len); |
423 | kfree(cbuf); | 419 | kfree(cbuf); |
424 | return len; | 420 | return len; |